The Apache Sling Web Console Security Provider OSGI component takes care of authenticating Web Console users against the JCR repository .

Its exposed configuration allows to enter AEM users and/or groups who will be allowed to access the Felix Console .

Read-only access is currently not possible.

For more information, please read https://sling.apache.org/documentation/bundles/web-console-extensions.html